PT-2026-114107 · Git · Opensis

·

CVE-2026-110679

·

Published

2026-10-14

·

Updated

2026-10-14

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.9 OpenSIPS versions prior to 4.0.2
Description A remote attack can trigger an out-of-bounds read within the rtpproxy component. This issue occurs specifically in the rtpproxy offer() and rtpproxy answer() functions.
Recommendations Update to version 3.6.9. Update to version 4.0.2.

Exploit

Fix

Out of bounds Read

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-110679
GHSA-QV9X-V8JQ-434W

Affected Products

Opensis